Re: Restricting Desktop Computers to view USB Flash Drive
- From: "Mark Heitbrink [MVP]" <spam-only@xxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 23 Jan 2006 09:49:56 +0100
Hi,
M P schrieb:
> I have problem with this USB flash drive. Since Windows 2000/XP allow this
> to install on ordinary users which is we need to restrict. Can this be
> disabled on Group Policy?
Not in a secure way.
- "nodrives" and "noviewondrives" have the problem that you need to
know the driveletter ... can be totally different on the clients.
- Disabling the Driver in CCS has the problem, that you have to
start it manually, if you login as an administrator
IMHO the best way is using 3rd Party.
Disbaling the driver via ADM:
----------- cut usb.adm -----------
CLASS MACHINE
CATEGORY "Services and Driver"
POLICY "USB-MassStorageDriver"
KEYNAME "System\CurrentControlSet\Services\usbstor"
PART "Startup" DROPDOWNLIST
VALUENAME "Start"
ITEMLIST
NAME "Boot" VALUE NUMERIC 0
NAME "System" VALUE NUMERIC 1
NAME "Automatic" VALUE NUMERIC 2 DEFAULT
NAME "Manual" VALUE NUMERIC 3
NAME "Deaktivated" VALUE NUMERIC 4
END ITEMLIST
END PART
END POLICY
END CATEGORY
----------- cut usb.adm -----------
Some 3rd Party
Drive Lock, Centertools http://www.centertools.de/
DeviceLock, SmartLine http://www.protect-me.com/de/dl/
Sanctuary Device Control (formaly SecureNT) SecureWave
http://www.securewave.com/
A little more, than you want:
PolicyMaker, DesktopStandard
http://www.desktopstandard.com/PolicyMakerStandard.aspx
Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
W2K FAQ : http://w2k-faq.ebend.de
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.
.
- References:
- Prev by Date: Hey Guys... Still having Issues with AD and Group Policy
- Next by Date: force auto log off
- Previous by thread: Restricting Desktop Computers to view USB Flash Drive
- Next by thread: Re: GPO for cookie Redirection
- Index(es):
Relevant Pages
|
